$response->headers->set('Access-Control-Allow-Origin', '*'); does not work code example

Example: header access-control particular domain

Access-Control-Allow-Origin: http://siteA.com